Malicious code in appx-compiler (npm)

The package appx-compiler was found to contain malicious code...

CVE-2025-20627

Uncontrolled search path for some IntelR oneAPI DPC++/C++ Compiler software before version 2025.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

HEIR: a Universal Compiler for Homomorphic Encryption

This work presents Homomorphic Encryption Intermediate Representation HEIR, a unified approach to building homomorphic encryption HE compilers. HEIR aims to support all mainstream techniques in homomorphic encryption, integrate with all major software libraries and hardware accelerators, and...

Fedora 41 : open62541 (2025-2b2997564c)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-2b2997564c advisory. Changes in v1.4.13: server: Cover edge-case in the EventFilter validation client: Cover edge-case in the UserTokenPolicy validation arch: Process delayed...

Oracle Java SE Compiler DoS

The vulnerability of the Compiler component of the Oracle Java SE software platform and the Oracle GraalVM for JDK virtual machine is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

CVE-2025-20627

Uncontrolled search path for some IntelR oneAPI DPC++/C++ Compiler software before version 2025.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20087

Incorrect default permissions for some IntelR oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20087

Incorrect default permissions for some IntelR oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20087

CVE-2025-20087 is an Intel advisory issue describing improper default permissions on some Intel® oneAPI DPC++/C++ Compiler installers that could let an authenticated local user escalate privileges. Affected: Intel oneAPI DPC++/C++ Compiler installers (and related tooling) with the vulnerability d...

PT-2025-32708 · Intel · Intel Oneapi Dpc++/C++ Compiler

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI DPC++/C++ Compiler versions prior to 2025.0.1 Description: An uncontrolled search path issue exists in some IntelR oneAPI DPC++/C++ Compiler software. This may allow an authenticated user to potentially escalate privileges via...

CVE-2025-20627: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR oneAPI DPC++/C++ Compiler software before version 2025.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel oneAPI DPC++/C++ Compiler code-related vulnerabilities

Intel oneAPI DPC++/C++ Compiler is a compiler from Intel Corporation USA. A code issue vulnerability exists in Intel oneAPI DPC++/C++ Compiler versions prior to 2025.0.1, which stems from an uncontrolled search path that could lead to elevated privileges...

Intel oneAPI DPC++/C++ Compiler security vulnerabilities

Intel oneAPI DPC++/C++ Compiler is a compiler from Intel Corporation USA. A security vulnerability exists in Intel oneAPI DPC++/C++ Compiler that stems from an improperly set default privilege, which could lead to elevated privileges...

CVE-2025-20087: Incorrect Default Permissions

Incorrect default permissions for some IntelR oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-32701 · Intel · Intel Oneapi Dpc++/C++ Compiler

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI DPC++/C++ Compiler affected versions not specified Description: Incorrect default permissions in some IntelR oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially escalate privileges via...

CVE-2025-8734

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Additional analysis indicates that the files referenced in the stack trace do not exist in Bison...

Linux Distros Unpatched Vulnerability : CVE-2025-38280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Avoid bpfprogret0warn when jit fails syzkaller reported an issue: WARNING: CPU: 3 PID: 217 at kernel/bpf/core.c:2357 bpfprogret0warn+0xa/0x20...

Linux Distros Unpatched Vulnerability : CVE-2023-29548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox 112, Focus for Android 112,...

Mbed TLS mbedtls_aesni_has_support() Data Compromise

The vulnerability of the mbedtlsaesnihassupport function in Mbed TLS is related to compiler optimization. Exploiting this vulnerability could allow an attacker to compromise the integrity and confidentiality of the protected information...

Linux Distros Unpatched Vulnerability : CVE-2024-31852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can sometimes be an...